agent-security-scanner-mcp MCP工具

When Adding Dependencies

check_package → verify each new package name is real, not hallucinated

Prerequisites

• Node.js >= 18.0.0 (required)
• Python 3.x (required for analyzer engine)
• PyYAML (pip install pyyaml) — required for rule loading
• tree-sitter (optional, for enhanced AST detection): pip install tree-sitter tree-sitter-python tree-sitter-javascript

Install the package (cr-agent is included)

npm install -g agent-security-scanner-mcp

1. On first install — record trusted baseline

scan_mcp_server({ server_path: "...", manifest: true, update_baseline: true })

1. On first install — record trusted baseline

scan_skill({ skill_path: "~/.openclaw/skills/my-skill", baseline: true })

Installation

Install

npm install -g agent-security-scanner-mcp

Or use directly with npx — no install required:

npx agent-security-scanner-mcp

Client Setup

The init command auto-detects your OS, locates the config file, creates a backup, and adds the MCP server entry. Restart your client after running init.

Install Claude Code hooks for automatic scanning

npx agent-security-scanner-mcp init-hooks

Install Hooks

npx agent-security-scanner-mcp init-hooks

This installs a post-tool-use hook that triggers security scanning after Write, Edit, or MultiEdit operations.

What Gets Installed

The command adds hooks to ~/.claude/settings.json:

{
  "hooks": {
    "post-tool-use": [
      {
        "matcher": "Write|Edit|MultiEdit",
        "command": "npx agent-security-scanner-mcp scan-security \"$TOOL_INPUT_file_path\" --verbosity minimal"
      }
    ]
  }
}

Install

npx agent-security-scanner-mcp init openclaw

This installs a skill to ~/.openclaw/workspace/skills/security-scanner/.

Quick Start

npx agent-security-scanner-mcp init claude-code

Restart your client after running init. That's it — the scanner is active.

Other clients: Replace claude-code with cursor, claude-desktop, windsurf, cline, kilo-code, opencode, or cody. Run with no argument for interactive client selection.

Quick Start

After installing agent-security-scanner-mcp, the cr-agent CLI is automatically available:

```bash

Quick Start

```bash

Quick Start

```bash

Usage in OpenClaw

The skill is auto-discovered. Use it by asking: - "Scan this prompt for security issues" - "Check if this code is safe to run" - "Verify these packages aren't hallucinated" - "Scan this skill before I install it"

---

Example Usage

// Minimal - just counts (~50 tokens)
{ "file_path": "app.py", "verbosity": "minimal" }
// Returns: { "total": 5, "critical": 2, "warning": 3, "message": "Found 5 issue(s)" }

// Compact - actionable info (~200 tokens, default)
{ "file_path": "app.py", "verbosity": "compact" }
// Returns: { "issues": [{ "line": 42, "ruleId": "...", "severity": "error", "fix": "..." }] }

// Full - complete metadata (~2,500 tokens)
{ "file_path": "app.py", "verbosity": "full" }
// Returns: { "issues": [{ ...all fields including CWE, OWASP, references }] }

CLI Options

Init Options

Manual Configuration

Add to your MCP client config:

{
  "mcpServers": {
    "security-scanner": {
      "command": "npx",
      "args": ["-y", "agent-security-scanner-mcp"]
    }
  }
}

Config file locations:

Configuration (`.scannerrc`)

Create a .scannerrc.yaml or .scannerrc.json in your project root to customize scanning behavior:

```yaml

Analyze a project (no API key needed with claude-cli!)

npx cr-agent analyze ./path/to/project -p claude-cli --verbose

CLI Commands

```bash

CLI Commands

```bash

Tool Reference

CLI Tools

Use the scanner directly from command line (for scripts, CI/CD, or OpenClaw):

```bash

Recommended Workflows

Standalone package

npm install -g clawproof clawproof scan ./SKILL.md ```

Security Reports: We've scanned all 777 ClawHub skills: - 69.5% have security issues - 21.2% have critical vulnerabilities (Grade F - DO NOT INSTALL) - 30.5% are completely safe (Grade A) - 4,129 prompt injection patterns detected

See ClawHub Security Dashboard for interactive exploration of all 16,532 skills with searchable security grades and detailed findings.

Detection Capabilities: - Prompt Injection (15 patterns): "ignore previous instructions", role manipulation - Jailbreaks (4 patterns): DAN mode, developer mode, pretend scenarios - Data Exfiltration (2 patterns): External URLs, base64 encoding - Hidden Instructions (2 patterns): HTML comments, secret directives

Security Grading: - A (0 points): Safe to install - B (1-10): Low risk - review findings - C (11-25): Medium risk - use with caution - D (26-50): High risk - not recommended - F (51+): DO NOT INSTALL - critical threats

---

Check for hallucinated packages

npx agent-security-scanner-mcp sbom-check-hallucinations .

`check_package`

Verify a package name is real and not AI-hallucinated before adding it as a dependency. Use whenever suggesting or installing a new package. Checks against 4.3M+ known packages.

Parameters:

Example:

// Input — checking a real package
{ "package_name": "express", "ecosystem": "npm" }

// Output
{
  "package": "express",
  "ecosystem": "npm",
  "legitimate": true,
  "hallucinated": false,
  "confidence": "high",
  "recommendation": "Package exists in registry - safe to use"
}

// Input — checking a hallucinated package
{ "package_name": "react-async-hooks-utils", "ecosystem": "npm" }

// Output
{
  "package": "react-async-hooks-utils",
  "ecosystem": "npm",
  "legitimate": false,
  "hallucinated": true,
  "confidence": "high",
  "recommendation": "Do not install. This package name does not exist in the npm registry."
}

---

`scan_packages`

Scan a code file's imports to detect AI-hallucinated package names. Use after writing code that adds new dependencies, or when reviewing dependency files (package.json, requirements.txt, go.mod, etc.). Checks all imports against 4.3M+ known packages across 7 ecosystems.

Parameters:

Example:

// Input
{ "file_path": "src/app.py", "ecosystem": "pypi" }

// Output
{
  "file": "src/app.py",
  "ecosystem": "pypi",
  "total_packages_found": 5,
  "legitimate_count": 4,
  "hallucinated_count": 1,
  "hallucinated_packages": ["flask-async-helpers"],
  "legitimate_packages": ["flask", "requests", "sqlalchemy", "pydantic"],
  "recommendation": "Found 1 potentially hallucinated package(s): flask-async-helpers"
}

---

Check if a package is legitimate

npx agent-security-scanner-mcp check-package flask pypi

Scan file imports for hallucinated packages

npx agent-security-scanner-mcp scan-packages ./requirements.txt pypi

OpenClaw Integration

OpenClaw is an autonomous AI assistant with broad system access. This scanner provides security guardrails for OpenClaw users.

SARIF Integration

scan_security supports SARIF 2.1.0 output for CI/CD integration:

{ "file_path": "src/app.js", "output_format": "sarif" }

Upload results to GitHub Advanced Security or GitLab SAST dashboard.

---

Compare against baseline (CI/CD)

npx agent-security-scanner-mcp sbom-diff . --save-baseline # First run npx agent-security-scanner-mcp sbom-diff . # Subsequent runs

Compare baseline

sbom-diff <dir> [--save-baseline] [--baseline-path <path>] [--verbosity minimal|compact|full]